NIST SP 800-171 Compliance Assessment and SPRS Reporting

The contract requires performing a comprehensive NIST SP 800-171 compliance assessment for systems used by Department of Defense contractors, focusing on evaluating the implementation and effectiveness of security controls designed to protect controlled unclassified information. The assessment must include a detailed documentation of the system architecture to ensure alignment with NIST requirements, and all findings must be formally submitted to the Supplier Performance Risk System to maintain government compliance records. Ongoing maintenance of documentation is critical, as updates must be promptly made and resubmitted whenever system configurations change to reflect current operational and security postures. The work is governed under a subcontract arrangement with a NAICS code of 541611 and is performance-based at New Cumberland, Pennsylvania, 17070-5002, with a response deadline of May 21, 2026, following a solicitation posted on May 13, 2026.